MS account, IMAP automatic sync with unsuccessful sync

kmax86

kmax86

kmax86

Associate
Joined
8 Sep 2011
Posts
1,961
Location
Northern Ireland
Hi

Was doing some security checks and noticed that my MS account is getting quite a few unsuccessful syncs via IMAP sync from Asia.

MS says "Don’t worry. This sign-in attempt was unsuccessful, so there is no need to change your password". Googled around but Im getting mixed answers from it is all good to Im screwed.

My question is, is this an attacker attempting to sync using only the email address? I have 2FA enabled but and Im not getting prompts for the code.

Or is it too late and the email has been compromised ?
 
Thanks, I looked around it seems only POP can only be disabled for outlook web and its already disabled.

No options for IMAP it seems.

Also looked further and see nothing suspicious like connected devices and auto mail forward.

Passwords already been changes so I guess just have to be vigilant and keep monitoring.
 
Normal web outlook non business.

Looks like IMAP is enabled based on the settings i see on outlook web
 
Hi, I managed to make the IMAP sync attempts stop by changing my sign-in alias.
After changing it, the sync attempts have stopped according to the sign-in activity.

The bots are prbbly brute forcing the email with random passwords is my guess.
 
Shinzra said:
Hello, apologies for also commenting on the post. I have also noticed a similar unsuccessful sign in attempt from countries abroad. What exactly does the Alias do, and how does the account change if you change the alias?
Click to expand...

https://support.office.com/en-gb/ar...look-com-459b1989-356d-40fa-a689-8f285b13f1f2

alias is just what the name suggests. 1 email account can have multiple aliases and they share the inbox and such. The link above explains it in detail.

When you have aliases you can pick which aliases are allowed to be used as a login
 
You must log in or register to reply here.
Back
Top Bottom